mifare DESFire

More documents

Recommendations

Info

Philips Semiconductors Preliminary Short Form Specification Rev. 2.0 September 2003 Short Form Specification mifare DESFire MF3 IC D40 2.6 Available File Types The files within an application can be of different types as: • Standard Data Files • Backup Data Files • Value Files with Backup • Linear Record Files with Backup • Cyclic Record Files with Backup 2.7 Security The 7 byte UID is unchangeably programmed into each device during production. It cannot be altered and ensures the uniqueness of each device. The UID may be used to derive diversified keys for each ticket. Diversified PICC keys contribute to gain an effective anti-cloning mechanism. Prior to data transmission a mutual three pass authentication can be done between PICC and PCD depending on the configuration employing either DES or 3DES. Data Transmission between PICC and PCD can be done on three levels of security: • Plain data transfer • Plain data transfer with DES/3DES cryptographic checksum (MAC) • DES/3DES encrypted data transfer (additional CRC integrity checksum before encryption) Access to user data is granted on application level. For each application up to 14 different user definable keys can be assigned to control access to data stored in the PICC. There are four different Access Rights stored for each file within each application: - Read Access (GetValue, Debit for Value files) - Write Access (GetValue, Debit, LimitedCredit for Value files) - Read&Write Access (GetValue, Debit, LimitedCredit, Credit for Value files) - ChangeAccessRights Each access right represents a link to one of the keys stored within the respective application's key file. If such a link is set to a number between 0 and 13 (max. 14 keys), this references a certain key within the application's key file, provided that the key exists (configuring a non-existing key is not allowed). If the number is coded as 14 (0xE) this means “free” access. Thus the regarding access is granted always with and without a preceding authentication, directly after the selection of the respective application. The number 15 (0xF) defines the opposite of “free” access and has the meaning “never” access. Therefore the respective linked Access Rights is always denied. 6 PUBLIC
Philips Semiconductors Preliminary Short Form Specification Rev. 2.0 September 2003 Short Form Specification mifare DESFire MF3 IC D40 3 DESFIRE COMMAND SET 3.1 ISO 14443-3: Command REQA WUPA ANTICOLLISION / SELECT Cascade Level 1 ANTICOLLISION / SELECT Cascade Level 2 Description REQA and ATQA are implemented fully according to ISO14443-3. WAKE-UP is implemented fully according to ISO14443-3. The ANTICOLLISION and SELECT commands are implemented fully according to ISO14443-3.The response is part 1 of the UID. The ANTICOLLISION and SELECT commands are implemented fully according to ISO14443-3.The response is part 2 of the UID. 3.2 ISO 14443-4: Command RATS PPS WTX Description The response to the RATS command identifies the PICC type to the PCD. The PPS command allows to individually select the communication baud rate between PCD and PICC. For DESFire it is possible to individually set the communication baud rate independently for both directions i.e. DESFire allows a nonsymmetrical information interchange speed. If the PICC needs more time than the defined FWT to respond to a PCD command it will send a request for a waiting time extension. 7 PUBLIC
Page 1 and 2: INTEGRATED CIRCUITS mifare DESFire
Page 3 and 4: Philips Semiconductors Preliminary
Page 5: Philips Semiconductors Preliminary

mifare DESFire

Create successful ePaper yourself

Delete template?

Save as template?